Extracted

• • Target

    e940fc703d370ba9a52e30c4a61fa78eff0f0496b342739b89dc04183637116f

  • Size

    899KB

  • MD5

    78bb6693926784a28a1db002baa77427

  • SHA1

    c2dd7f5dd85cf86c8b71c8f9c9fdf811a692a3d6

  • SHA256

    e940fc703d370ba9a52e30c4a61fa78eff0f0496b342739b89dc04183637116f

  • SHA512

    873c8e1a656d22758d734e148fa90f3e0285c2a0dc6dd74f2dd3ea44c108f844e9fa04cddf67b8598894e3e16051074a4efd92cc33198521525619480d9f96b7

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXA:7wqd87VA

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2